Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: i3IBVYRMLumFzMcxcflWb3jDeXrVXd7KfipaHkXvALg=
Subject key identifier: 60:18:FA:C7:4A:A3:C3:25:E6:F5:89:8C:52:06:E8:69:73:90:7F:DC
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 0196447B4C083FBE95ED1C815D191615013B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 120E
Signing time: Thu 17 Apr 2025 16:00:52 +0000
Manifest this update: Thu 17 Apr 2025 16:00:52 +0000
Manifest next update: Fri 18 Apr 2025 16:00:52 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: CRuw8FarmRW8/4DFozVAV+dlaHTvSaOvE0etX7g58R4=)
2: bMRktPBk3GJGItNskNyUqcrOWmw.roa (hash: oN+XpyM7329DMObxCObtViAvj7EaNMyaASixYhlQlxY=)
3: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (hash: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:4c:08:3f:be:95:ed:1c:81:5d:19:16:15:01:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Apr 17 16:00:52 2025 GMT
Not After : Apr 18 16:00:52 2025 GMT
Subject: CN=6018fac74aa3c325e6f5898c5206e86973907fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:93:f1:0b:0d:8d:91:51:a8:06:6c:e9:d8:
62:e3:aa:87:de:e0:d6:e1:20:ac:ef:c8:94:8c:3d:
29:60:a8:b4:b2:e6:5d:6a:6f:cb:3f:e2:1c:95:21:
76:ff:5f:b7:c4:f9:8a:21:84:94:8d:4c:4e:45:6b:
8f:f0:fb:2c:1c:d3:2f:11:9b:3c:cc:9d:84:06:c2:
32:2d:f8:7a:80:9c:01:4d:2c:b2:f6:c9:1d:79:8a:
cd:3b:e1:63:85:0c:f0:4d:a7:fe:71:c1:5e:36:13:
01:4e:4f:25:4a:f6:dc:bd:46:76:0f:20:75:2e:b6:
73:e4:39:f6:eb:1c:92:e4:85:7b:8b:43:fd:a4:6d:
54:ed:04:4b:21:9a:42:e6:46:33:be:c8:39:24:c1:
74:13:fd:2a:3f:d9:c6:91:78:08:38:39:44:f3:e0:
5b:99:92:76:5b:76:a6:c7:05:5d:6c:fd:86:df:27:
71:c2:13:b6:4d:d7:85:fc:6c:69:95:c7:8c:63:8d:
af:19:05:1e:f7:1b:30:a8:b7:a5:d8:50:e5:c5:f2:
83:48:16:74:a0:00:23:34:6c:8d:15:d1:01:f2:e7:
d0:5c:10:8f:25:eb:c8:a6:a3:f9:09:ae:90:57:bb:
c1:89:26:28:ba:0e:90:1f:e0:c1:df:49:90:12:b7:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:18:FA:C7:4A:A3:C3:25:E6:F5:89:8C:52:06:E8:69:73:90:7F:DC
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5e:6f:c8:60:f6:7d:22:25:8c:1c:18:3c:3b:a0:91:7c:eb:
e6:95:07:20:9b:a8:ed:b8:f8:be:81:c6:96:4b:4f:d1:f0:82:
27:c3:31:a3:02:af:47:79:8f:d9:e4:34:0b:11:ec:a0:1c:27:
0b:ed:9b:83:d4:75:15:d5:fe:f9:24:1b:d4:fe:a4:60:1b:e4:
f5:58:d5:eb:98:6b:00:b0:50:c7:e4:e1:52:55:b1:39:e0:b5:
0e:b7:d4:d3:3a:61:05:aa:1c:d5:82:26:fd:74:4f:8f:ac:0c:
61:b3:63:f9:10:18:6b:12:23:3f:d1:e2:bf:cf:37:a9:cf:c8:
e4:9f:c7:5a:92:d8:0c:12:c3:28:e2:55:bd:f6:1a:bb:48:01:
7a:9e:3a:6c:5e:90:87:03:33:d2:f3:5d:36:4c:53:b8:06:56:
50:cf:a5:16:b4:95:ee:f8:c4:13:cd:e0:03:15:1a:6d:95:9d:
58:39:4e:d5:f1:15:fe:85:56:55:6b:3e:6f:10:80:3a:89:58:
d5:ed:5e:02:06:7a:25:cf:0a:63:f5:04:9e:0a:7d:99:a8:3b:
fe:84:f3:c7:aa:3a:dd:77:a8:7c:2a:59:bc:01:d2:25:8f:2a:
6f:ed:47:8f:6c:f3:4b:b2:d0:44:8a:14:ae:25:44:32:62:5c:
c1:3d:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:05:33 2025 by rpki-client